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REMARKS 

The Applicants and the undersigned thank Examiner Jung for Ids ti me and consideration 
given during the telephonic interview of Or-tohcr 6, 2005. TTie Applicants also appreciate fee 
Examiner's careful review of this application, 

In connection with a pelilu.ni and two month extension fee to extend the due date to 
October 24, 2005 and a Request for Continued Examination filed herewith, consideration of the 
claim amendments above and the remarks below is respectfully requested. CMms 3-18 have 
been rejected, Claims 1-2 have been cancelled anil Claims 3-18 arc pending in this application, 
The indepemler.1 claims are Claims 3, 7, and 13. Consideration of Hie present application is 
respectfully requested in light of the above amendments to the application and in view of this 
following remarks. 

Summary of Telephon ic Interview Conducted on October 6, 9.005 

The Applicant and the undersigned extend their gratitude to Examiner Jung far the 
telephonic interview conducted with the Examiner on October G, 2005. During the telephonic 
interview, rh K CEO of the assignee, Mr. James Dalton, and Examiner Jung dhwwwd the state of 
the prior art that was used to reject die uirrently pending U.S. palent claims. 

Mr. Dalton explained what the independent claims were describing as understood by one 
Of ordinary skill in the art aid how they contained elements that were not taugjit by the prior ait 
of record. Examiner Jung requested Mr. Dalton to explain bow the claimed technology was 
different from a standard prepared by the European Telecommunications Standards Institute. 
Specifically, Examiner Jung requested Mr. Tlalrnn to explain the differences between European 
Tdecoiiununications Standards Institute (BTSI) technical standard <TS) 101 321 (hereinafter, tho 
"published '321 standard'*). 

While it was explained to Examiner Jung that he did not use the Published '321 standard 
to reject any of the patent claims pending in his May 23, 2005 Office Action, Mr. Daltnn *ml die 
undersigned agreed to provide the analysis that RxHininci Jung requested. Mr. Dalton explained 
lo Exaiuiufi.* Jung that this Published '321 standard does not provide any guidance on how tn 
exchange a digital ccrtiUccdfc between a server and a client. Additional differences between the 
standard and the claimed technology are mrther described bcluw. 
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After listening to Mr. D*Ws explanation of how the Published '321 standard does not 
,Whe each and every element of independ^L Claim 1. Examiner Jung requested Mr. Dallon to 
explain how the U.S. Pal. No. 6,526.131 issued in the name of Zimmerman ct al (applied by the 
Examiner in his May 23, 2005 Office Action and hereinafter, the "Zimmerman r^cce") does 
not anticipate or obviate the claimed technology. 

Mr. Dalton explained thai Lhe Zimmerman reference, to one of ordiiimy sWI1 in the art, 
teaches a way to have functional capabilities of a dedicated connection using a dial-up 
connection or another connection method that is only used when newlaL The Zimmerman 
rcfercnee describes various ways to use a waVe-up call to a remote device to quickly establish a 
connection, rather than maintaining a dedicated phone line. Further details of the Zimmerman 
reference will be described below. 

Mr. DalLuii explained that v/hile the Zimmerman tfiference docs discuss a general 
teaching that certificate information may he exchanged between a cenificals aotlmrity (CA) and 
a cli«u device, the Zimmerman reference, like the Published '321 standard, does not explain 
how to exchange iirformarimi between a CA and a client device. 

Mr. Dalton explained the both the Zimmerman reference and Published '321 standard 
both do not provide any teaching of receiving a first message from a client Internet telephony 
device that comprises an automated re^issl to obtain an identity one of an Internet telephony 
dearinghoiise and Internet telephony routing policy server. 

After listening to Mr. Dalton, Examiner Jung indicated that he now understands what the 
P Hl«xt claims arc trying to protect Examiner Jung snarled a few changes to the proposed 
claims to make them more l1«u to the Examiner (which have been adopted by the Applicants 
and are in the amended claims presented abuv*). Rxatnincr Jung stated he would take these 
points discussed by the Applicants under consideration and that he. would likely need to conduct 
an update search of the prior art 

The Applicants and the undersigned request Examiner Jung to review this interview 
summary and to appro** it 1>y writing "Intciviow Record OK" along with his initials and mc date 
next to this summary in the margin as discussed in MPEP § 71 3.04, p. 700-202. 
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rigiTn Rt ^i-finns under 35 U.S .C §J03 

•1-he Examiner rejected Claims 3-1B under Si U.S.C. § 103 (a) as being unpatentable over 
Zmurofluiii ct al.. U.S. Potent No. 6,526,131 (here.™!!* die "Zimmerman reference") in view 
ot a printed publication entitled, "Introduction to SSL," (herein*^ the "SSL rcrcrcnce'O 
allejjerily published on October 9, 1998 and retrieved from the Internet on May 19, 2004 at 
htlp://developer.nel^apexoni/doc^ 

The Applicants will address each imtepftndent claim separately aa the Applicants bel ieve 
that each independent claim is separately patentable over the priiir art of record. 

Iinlcpcnriftnt PI aim 3 

It is respectfully submitted that the Zimmerman and SSL references and the Published 
'321 standard fail to describe, teach, or suggest jrir i^ihination of(l) receiving a first message 
via HTTP from a client Internet telephony device that comprises (2) an automated request to 
obtain an identity of one of an Internet telephony clearinghouse and Internet telephony routine 
policy server, the mjucst further comprising (3) an automated winter prograimmng variable 
operation (4) that is set equal to alphanumeric text comprising 'getcacen' and that (5) initiate a 
search for a certificate authority certificate; (6) responding to the rermest by (7) transmitting a 
second message comprising the (8) ™-nficate authority certificate of one of (9a) an Internet 
telephony clearinghouse and (9b) Internet telephony routing jiolicy server (10) in a Baee64 
format and (11) encoded i>. ASCII with content type set to text/html; (12) receiving a third 
message comprising (13) a certificate request from die client Internet telephony device; (14) 
responding w ihe client Internet telephony device request (15) by signing the certificate; and (16) 
transmitting a fourth message comprise (17) the certificate signed by (18) a certificate 
authority of one of (19a) the Internet telephony clearinghouse anil (19b) tiic Internet telephony 
routing policy server, as recited in amended independent Claim 3. 

The Zimmerman Reference 

The Zimmerman reference describes ways In avoid the need for dedionted ITSN phone 
line* Dedicated PTSN phone linec can be phone lines used to keep two computer systems 
permanently connected for immediate communication between the two systems when ra 1( .ii«l. 
A dedicated phone line is a simple, convenient and secure way lv connect two systems. 
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Meanwhile, the Zimmerman reference describes a way to have the functional capabilities 
of a dedicated connection using a dial-up connection or another connection method that is used 
only when needed. The Zimmerman reference relates to remotely waking up customer premises 
equipment to cause the latter to initiate communication with a network-based service system. 

The Zimmerman reference describes ways to use a wake-up call to a remote device to 
quickly establish a connection, rather than maintaining a dedicated phone line. The wakeup call 
is identified by means of a characteristic caller ID or distinctive ring, or, in the event the call is 
picked up, by rapid call termination, by an in-band signal, or by a predetermined period of 
silence. All these call characteristics permit the customer premises equipment to recognize 
wakeup calls on a line also receiving normal telephone calls. 

The Examiner refers the Applicants to Column 8, lines 37-45 of the Zimmerman 
reference that generally describes the use of Secure Sockets Layers (SSLs) to establish secure 
communications. However, this section of the Zimmerman reference does not provide any 
further details about how SSL is used. In fact, the Examiner admits that the Zimmerman 
reference does not teach the specifics of the SSL protocol. See Office Action of August 20, 
2004; page 2, paragraph number 4. 

In light of this, it is apparent to one of ordinary skill in the art that the Zimmerman 
reference cannot anticipate nor render obvious a combination of elements noted above, 
especially (a) receiving a first message via HTTP from a client Internet telephony device that 
comprises (b) an automated request to obtain an identity of one of an Internet telephony 
clearinghouse and Internet telephony routing policy server, the request further comprising (c) an 
automated computer programming variable operation (d) that is set equal to alphanumeric text 
comprising 'getcacert' and that (e) initiates a search for a certificate authority certificate, as 
recited in amended independent Claim 3. 

The SSL reference 

The Examiner admits that the Zimmerman reference does not teach the specifics of roe 
SSL protocol. To make up for this SSL deficiency, the Examiner relies on the SSL reference. 

The SSL reference generally teaches the SSL protocol. The SSL provides a summary of 
steps that are taken during an SSL handshake to establish a secure communications channel. 
However, the SSL reference does hot provide any teaching or description of the contents of 
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messages that are exchanged between a client device and a server. See the SSL reference on 
page 6, second full paragraph after the table which states the following: 

"The exact programmatic details of the messages exchanged 
during the SSL handshake are beyond the scope of this document. 
However, the steps involved can be summarized as follows 
^assuming the use of cipher «nitei listed in Cipher Suites with RSA 
kev exchange) :" 

Therefore, it is apparent to one of ordinary skill in the art that the SSL reference, like the 
Zimmerman reference, also cannot anticipate nor render obvious a combination of elements 
noted above, especially (a) receiving a first message via HTTP from a client Internet telephony 
device that comprises (b) an automated reouest to obtain an identity of one of an Internet 
telephony clearinghouse and Internet telephony routing policy server, the request mrther 
comprising (c) an -tnmatert — ^ programming variable operation, (d) that is set equal to 
alphanumeric text comprising 'getcacert' and that (e) initiates a search for a certificate authority 
certificate, as recited in amended independent Claim 3. 

Published '321 Standard 

As noted above by the Applicants, the Examiner did not use the Published «321 standard 
to reject any of the claims in the May 23, 2005 Office Action. However, the Examiner requested 
the Applicants during the telephonic interview of October 6, 2005 to explain how the Published 
'321 standard is different from the claimed technology. As a courtesy, the Applicants offer the 
following explanation in response to the Examiner's request. 

The Published '321 standard has the following title: "Open Settlement Protocol (OSP) 
for Inter-Domain pricing, Authorization and Usage exchange." The Open Settlement Protocol 
(OSP) defines a standard set of messages that telephone carriers can use to authorize and account 
for inter-carrier telephone calls over IP networks. OSP messages are usually written in XML 
(extensible Markup Language) using text characters and English words and abbreviations. 

Example OSP messages are AuthorizationRequest (a message which defines how to 
request the IP address corresponding to a telephone number) and Usagelndication (an accounting 
message which reports how call duration after the call is finished). 
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The OSP standard does not define any security or cryptographic techniques. However, 
the OSP standard does mention how OSP messages could be secured with existing cryptographic 
techniques in three places: 

1) The OSP standard in section 5.1, page 13, defines that OSP messages written in XML may be 
conveyed using the Hyper Text Transport Protocol (HTTP) over an Internet Procotol (IP) 
network. The OSP standard also states that for secure communications, the OSP messages 
written in XML may also be transmitted using the Secure Sockets Layer (SSL) or Transport 
Layer Secure (TLS) protocol. 

2) Annex B, page 46, of the OSP standard references cryptographic algorithms required by 
SSUTLS and digitally signed messages and tokens. 

3) Annex D, page 50. defines the format for OSP authorization tokens which may 

cryptographically encoded. 

While these three security techniques rely on digital certificates, the OSP standard and 
the reference security technologies (SSL/TLS) do not teach how to exchange a digital certificate 
between and server and a client. As discussed with the Examiner during the telephonic interview 
of October 6, 2005, a certificate can be exchanged between a client and a server via any number 
of obvious mechanisms such as through U.S. Postal service (mail), E-mail, File Transport 
Protocol (ftp), and other like mechanisms. However, none of these mechanisms are practical for 
voice over Internet Protocol (VoIP). The inventive claims define an efficient operation which 
enable a VoIP client to automatically 'enroll' with a certificate authority. Enrollment usually 
includes obtaining a public key and signed certificate from a certificate authority. 

Li light of the differences between amended Claim 3, the SSL, Zimmerman references, 
and the Published '321 standard, one of ordinary skill in the art recognizes that the broadest, 
reasonable interpretation of mese references cannot anticipate or render obvious the recitations as 
set forth in amended independent Claim 3. Accordingly, consideration and an indication that 
amended Claim 3 is allowable over the prior art are respectfully requested. 

Independent Claim 7 

It is respectfully submitted that the Zimmerman and SSL references and Published '321 
standard fail to describe, teach, or suggest the combination of (1) receiving a first message from 
a (2) client Internet telephony device that comprises (3) an automated request to obtain an 
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identity of one rf (4) an Intern* telephony dearh.ghousc and C) Internet telephony muting 
policy server; (6) reading u> be automated request by (7) letting a second message 
compTiKmg (8) a certificate authority certificate of one (9a) of an Mernet telephony 
clearinghouse and (9b) toon* telephony routing policy server to the chent Internet telephony 
device; (10) receiving a mird message ccmprisin* (11) a certified .equcst fiom the ohent 
internet telephony device the certificate request comprising (12) a nonce value, (13) a use* 
name (14) a user'* passwo^ (15) an Internet telephony device identifier, (16) a customer 
identifier, and a (17) certificate request to be signed; (18) responding to the client Internet 
telephony device request by (19) rigning the certificate; and (20) transmittine a fourth message 
comprising (21) the certificate rip») hjr the certificate authority of one of (22.) the Internet 
telephony clearinghouse and (22b) Internet telephony .outing policy server., u recited u, 
amended independent Claim 7. 

A* noted above in the discussion of independent Claim 3, the Zimmerman and SSL 
references and the do not «ddr«« exact progromrnatic detail* of the messages exchanged during 
an SSI. handshake. Therefore, it is apparenl u. one of ordinary skill in the ait thai tb* SRL 
reference and Zimmerman references cannot anticipate nor render obvious a combination of (a) 
receiving a third message comprise * certificate rcqueat from the client device, the certificate 
request causing a (b) nonce value, a (c) usexN .ut,ne. a (d) user's password, a (e) dev*e 
idcntiiJcr, a (f) customer identify, and a (g) certificate request to be signed; (h) responding to 
die client device request by signing the ue.lirir.ftte; and (i) tronfiimtting a fourth message 
comprising tho certificate signed by the CA of the clearinghouse » ixnittag policy server, as 
TOLited in amended independent Claim 7. 

In light r,r the differences between amended Claim 7 and tic SSL and Zimmerman 
references and the Published '121 standard, one of ordinary skill in the art tw^tc* mat the 
broadest, reasonable mterpretation of these referenu* cannot anticipate or render obvious the 
recitations as set forth in amended independent Claim 7. Accordingly, consideration end an 
indication that Clam 7 is allowable over the prior art are respectfully requested. 

fadq rendont Claim 11 

It is respectfully submitted that the Ziromern.au and SSL and PubliGhed '321 standard 
references fail to describe, teach, or suggest the combination of (1) receiving a first meswge 
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from a client Internet telephony device that comprises (2) an automated request to obtain an 
identity of one of (3a) an Internet telephony clearinghouse and (3b) Internet telephony routing 
policy server; (4) responding to the request by (5) transmitting a second message comprising a 
certificate authority certificate of one of (6a) an Internet telephony clearinghouse and (6b) an 
Internet telephony routing policy server to the client Internet telephony device, wherein the 
second message comprises (7) a programming variable status that is set equal to alphanumeric 
text (8) comprising 'O&certificate' that (9) indicates certificate authority information follows the 
alphanumeric text; (10) receiving a third message comprising a certificate request from the client 
Internet telephony device comprising a certificate request to be signed; (11) responding to the 
client internet telephony device request by signing the certificate; and (12) transmitting a fourth 
message comprising (13) the certificate signed by the certificate authority of one of (14a) the 
Internet telephony clearinghouse and (14b) Internet telephony routing policy server, as recited in 

amended independent Claim 13. 

As noted above in the discussion of independent Claim 3, the Zimmerman and SSL 
references and Published '321 standard do not address exact programmatic details of the 
messages exchanged during an SSL handshake. Therefore, it is apparent to one of ordinary skill 
in the art that the SSL reference, like the Zimmerman reference, also cannot anticipate nor render 
obvious a combination of (a) responding to Hie request by transmitting a second message 
comprising a certificate authority certificate of one of a clearinghouse and a routing policy server 
to the client device, wherein the second message comprises (b) a programming variable status 
that is set equal to (c) alphanumeric text comprising 'O&certificate' that indicates certificate 
authority information follows the alphanumeric text; (d) receiving a third message comprising a 
certificate request from the client device comprising a certificate request to be signed; and (e) 
responding to the client device request by signing Hie certificate, as recited in new independent 
Claim 13. 

In light of the differences between amended Claim 13 and the SSL and Zimmerman 
references, one of ordinary skill in the art recognizes that the broadest, reasonable interpretation 
of these references cannot anticipate or render obvious the recitations as set forth in amended 
independent Claim 13. Accordingly, consideration and an indication that Claim 13 is allowable 
over the prior art are respectfully requested. 
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N<*y Depended C.U\ms 4-6. 8-12, and 14-18 

These dependent claims should be allowable because their corresponding dependent 
claims should be allowable over the prior art of record. Consideration of these dependent claims 
and an early notice of allowance are courteously solicited from the Examiner. 

roNCXUSlQN 

The foregoing is submitted as a full and complete response to the Office Action mailed 
on May 23, 2005. The Applicants and the undersigned thank Examiner Jung for the 
consideration of these remarks. The Applicants have submitted remarks to traverse the pending 
rejections and to identify the differences between new Claims 3-18 and the prior art. The 
Applicants respectfully submit that the present application is in condition for allowance. Such 
Action is hereby courteously solicited. 

If any issues remain that maybe resolved by telephone, the Examiner is requested to call 

the undersigned at 404.572-2884. 

Respectfully submitted, 



King & Spalding LLP 
45* Floor 

191 Peachtree Street, N.E. 
Atlanta, Georgia 30303 
404.572.4600 

K&S Docket: 06949.105013 




Wigmore 
r o. 40,447 
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